13 results · Feed
-
High 8.8
Heap buffer overflow in libvpx
Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.
-
Medium 5.4
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap …
-
Medium 5.9
Integer overflow in libvpx
There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the return…
-
Medium 5.7
Heap overflow in libvpx
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above
-
Unscored —
VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.
-
High 8.8
Electron affected by libvpx's heap buffer overflow in vp8 encoding
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
KEV Oct 2, 2023 -
Unscored —
In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This cou…
-
Unscored —
In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote infor…
-
Unscored —
In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial o…
-
Unscored —
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information …
-
Unscored —
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information …
-
Unscored —
In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer…
-
Unscored —
A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.…